Trojan:SymbOS/CDropper

Details

Summary

Trojan:SymbOS/CDropper is a large family of malware that drop malicious files onto
the affected device.

Removal

Automatic action

F-Secure Mobile Security will detect the installed Cabir variants and delete the worm
components. After deleting worm files you can use application manager to uninstall
the SIS file that dropped the worm.

If your phone is infected with Cabir variant and you cannot install files over Bluetooth,
you can download F-Secure Mobile Anti-Virus directly to your phone

Technical Details

On arriving on a new system, Trojan:SymbOS/CDropper installs Cabir variant(s) into
several places in the device file system.

Some of the installed Cabirs will replace system or common third party applications.
If the user has one of these applications installed, it will be replaced with Cabir
and its icon in the menu will go blank.If the user clicks on one of the replaced icons
in the menu, the Cabir executable will execute and try to spread to other devices.